I don't believe you're "supposed" to have entries with quotes in the title, but you can, and I've submitted them. This issue fixes a bug where unescaped entries with said quotes break the input field when modifying an entry.

THERE IS NO TESTING DONE!

I don't know how or where to test OCS stuff, or how to set up a local OCS test server. This commit is small enough that it won't burn down the system, but I'd really, really like to have a testing area before more in-depth work.

If there is some OCS-based alternative to htmlspecialchars it would be applicable here instead of my solution, I don't know the moving parts available.

If this fix is good and acceptable I'll go through and prep more.